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All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1. This communication is responsive to 05 June 2006 . 

2. [>3 The allowed claim(s) is/are 1-4.6.7.9-17 and 19-26 . 

3. D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
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(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 
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(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Attorney Michael Dodd, Reg. No. 46,437 on August 1 , 2006. 

The application has been amended as follows: 

Please amend the following claims: 

6. (Currently Amended) A method in accordance with Claim S-[1], 
wherein the specific act of the external client providing security to the connection 
comprises: 

a specific act of the external client using a Secure Socket Layer (SSL) 
protocol to provide security to the connection. 

7. (Currently Amended) A method in accordance with Claim §-[1], 
wherein the specific act of the external client providing security to the connection 
comprises: 

a specific act of the external client using a Wireless Transport Layer 
Security (WTLS) to provide security to the connection. 
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9. (Currently Amended) A method in accordance with Claim 8-[1], 
wherein the [Virtual Private Network] (VPN) access server is implemented on the 
same server machine as a proxy server that serves the private network. 

10. (Currently Amended) A method in accordance with Claim 8-[1], 
wherein the [Virtual Private Network] (VPN) access server is implemented on a 
different server machine than a proxy server that serves the private network. 

DETAILED ACTION 

2. Claims 6-7 and 9-10 have been amended. 

3. Claims 5,8, and 18 have been cancelled. 

4. Claims 1-4,6-7,9-17, and 19-26 are pending. 

Response to Arguments 

5. Applicant's remarks filed 28 October 2005 have been fully considered and they 
are persuasive. 

Allowable Subject Matter 

6. Claims 1-4,6-7,9-17, and 19-26 are allowed. 

7. The following is an examiner's statement of reasons for allowance: The present 
invention is directed towards a method and apparatus for establishing a secure 
connection to a virtual private network access server over a public network without the 
user being restricted to communication through the private network. Each independent 
claim identifies the uniquely distinct features "establishing a connection with a virtual 
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private network access server of the private network over the public network 
using the communication device, the virtual private network server providing the 
external client access to the private network as though the external client is part 
of the private network". The closest prior art, Grangtes, Jr. (US Patent No. 6,324,648) 
discloses a computer system providing authenticated access for a client computer over 
an insecure, public network to one of a plurality of destination servers on private, secure 
network, through the use of a client-side X.509 digital certificate. However, either 
singularly or in combination, Grangtes, Jr. fail to anticipate or render the claimed 
limitation of establishing a connection with a virtual private network access server of the 
private network over the public network using the communication device, the virtual 
private network server providing the external client access to the private network as 
though the external client is part of the private network. The closest prior art, 
Subramaniam et al. (US Patent No. 6,081,900) discloses computer network security, 
and more particularly to the task of providing a user who is presently at a client machine 
outside the perimeter of a secure network with convenient, efficient, and secure access 
to data stored on a target server which is located within the secure network. However, 
either singularly or in combination, Subramaniam et al. fail to anticipate or render the 
claimed limitation of establishing a connection with a virtual private network access 
server of the private network over the public network using the communication device, 
the virtual private network server providing the external client access to the private 
network as though the external client is part of the private network. The closest prior art, 
King (US Patent No. 6,317,831) discloses a method and apparatus for establishing a 
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secure connection over a one-way data path. The techniques enable cryptographic 
handshake operations for a one-way data channel to be performed over a companion 
two-way data channel so that the one-way data channel is able to effectively satisfy 
security protocols that require two-way communications for the cryptographic 
handshake operations. However, either singularly or in combination, King fail to 
anticipate or render the claimed limitation of establishing a connection with a virtual 
private network access server of the private network over the public network using the 
communication device, the virtual private network server providing the external client 
access to the private network as though the external client is part of the private network. 
The closest prior art, Xu et al. (US Patent No. 6,151,628) discloses a method for 
providing network access connection from a source of digital data to a computer 
network. However, either singularly or in combination, Xu et al. fail to anticipate or 
render the claimed limitation of establishing a connection with a virtual private network 
access server of the private network over the public network using the communication 
device, the virtual private network server providing the external client access to the 
private network as though the external client is part of the private network. The closest 
prior art, Dr. James H. Scharen-Guivel, "Wireless Virtual Private Networks in the Mobile 
Enterprise", discloses a virtual private network that supports remote access and 
establishes a method for end-to-end security from a wireless device to the enterprise. 
However, either singularly or in combination, Dr. James H. Scharen-Guivel fail to 
anticipate or render the claimed limitation of establishing a connection with a virtual 
private network access server of the private network over the public network using the 
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communication device, the virtual private network server providing the external client 
access to the private network as though the external client is part of the private network. 
The closest prior art, Laurence Lee Min En, "Wireless Application Protocol Wireless 
Transport Layer Security (WAP WTLS)", discloses a security protocol that bridges the 
gap between wireless and the Internet. The security protocol is designed to transmit 
data from a terminal to an application server. However, either singularly or in 
combination, Laurence Lee Min En fail to anticipate or render the claimed limitation of 
establishing a connection with a virtual private network access server of the private 
network over the public network using the communication device, the virtual private 
network server providing the external client access to the private network as though the 
external client is part of the private network. 

8. Therefore, claims 1,12,19, and 22, and the respective dependent claims 2-4,6- 
7,9-17,20-21 and 23-26 are in condition for allowance. 

Conclusion 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 571- 
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272-3871 . The examiner can normally be reached on Mon - Thurs. 6:00 - 4:00 pm; off 
every Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




August 1, 2006 




